Analysis
-
max time kernel
93s -
max time network
99s -
platform
windows10-2004_x64 -
resource
win10v2004-20240802-en -
resource tags
arch:x64arch:x86image:win10v2004-20240802-enlocale:en-usos:windows10-2004-x64system -
submitted
13-09-2024 07:24
Behavioral task
behavioral1
Sample
8161fb4c042aac76e73980d52138488cbb52b0581a34ea312510e3af3413a0c9.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
8161fb4c042aac76e73980d52138488cbb52b0581a34ea312510e3af3413a0c9.exe
Resource
win10v2004-20240802-en
General
-
Target
8161fb4c042aac76e73980d52138488cbb52b0581a34ea312510e3af3413a0c9.exe
-
Size
230KB
-
MD5
a7e0c20da5405e04b80b5c6a70c21ef5
-
SHA1
ce2cecc7bef86a654ad0861255c0c829bdba0a1b
-
SHA256
8161fb4c042aac76e73980d52138488cbb52b0581a34ea312510e3af3413a0c9
-
SHA512
fc216893f5a73fd343d7896eb73a728eab82c24cb8370c0f4584555b8ce434e43a69b8e317262113d3566296031a52a3dbcf77412d4cb0624e4d29ed39978eb5
-
SSDEEP
6144:KOqDycyyVJP4E2t+3ydnJhU9vWtrvz3w:Fmyc9UE2t++h6v2/g
Malware Config
Signatures
-
Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
-
Processes:
resource yara_rule behavioral2/memory/2244-0-0x00007FF7F9DF0000-0x00007FF7F9E76000-memory.dmp upx behavioral2/memory/2244-1-0x00007FF7F9DF0000-0x00007FF7F9E76000-memory.dmp upx